Application Security
CWE-706 Use of Incorrectly-Resolved Name or Reference
A name that resolves outside the intended boundary, such as a path, link or alias, exposes the wrong resource. CWE-706 is the umbrella for those bugs.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-705 Incorrect Control Flow Scoping: The Goto Fail Family
Control returns to the wrong place after a task or an error, as in Apple's goto fail bug and an uncaught exception boot loop. CWE-705 explained.
Oct 18, 20263 min read
Application Security
CWE-704 Incorrect Type Conversion or Cast: Loose Equality to Truncation
Converting data from one type to another can change its meaning. CWE-704 spans memory-unsafe casts and PHP's loose comparison of hashes.
Oct 18, 20262 min read
Application Security
CWE-703 Improper Check or Handling of Exceptional Conditions
Rare failures such as bad input, timeouts and missing resources are where software gets exploited. CWE-703 covers how to plan for them and test them.
Oct 18, 20263 min read
Application Security
CWE-7 J2EE Missing Custom Error Page: Stop Leaking Stack Traces
Default error pages and stack traces hand attackers your database type and container version. How CWE-7 happens in Java web apps and how to configure error pages.
Oct 18, 20263 min read
Application Security
CWE-698 Execution After Redirect: Why Redirects Need an Exit
A web app sends a redirect but keeps running, so unauthorized users still trigger the protected code. CWE-698 explained with a PHP example and the one line fix.
Oct 18, 20263 min read
Application Security
CWE-697 Incorrect Comparison in Security Checks
Comparing the wrong thing, or too few things, breaks authentication and header parsing. CWE-697 explained through proxy bugs and loose equality.
Oct 18, 20262 min read
Application Security
CWE-696 Incorrect Behavior Order: Right Steps, Wrong Sequence
Drop privileges in the wrong order, initialize too late, enforce a limit after the work is done. CWE-696 is about sequence mistakes and the setuid classic.
Oct 18, 20263 min read
Application Security
CWE-695 Use of Low-Level Functionality Your Framework Prohibits
Frameworks often forbid certain low-level calls because they bypass built-in protections. CWE-695 is what happens when code uses them anyway.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.